Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5BA05EC4D811EDB555AA7FC4F9AE02.roa
File: DC5BA05EC4D811EDB555AA7FC4F9AE02.roa (raw, json)
Hash identifier: 5ligbQZrJrW7BmpTfTv+PukPGGoKvkgoF55fMgwY1Iw=
Subject key identifier: DF:46:FB:86:35:0F:24:44:9C:36:DF:13:94:6B:9D:37:2D:B8:81:89
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0471
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5BA05EC4D811EDB555AA7FC4F9AE02.roa
Signing time: Sat 22 Apr 2023 07:03:16 +0000
ROA not before: Sat 22 Apr 2023 07:03:15 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 132422
IP address blocks: 43.229.152.0/24 maxlen: 24
103.48.168.0/24 maxlen: 24
103.48.169.0/24 maxlen: 24
103.48.170.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Apr 22 07:03:15 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=644386b3-b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:f1:1d:9b:55:38:0c:10:67:04:18:52:da:
f9:9e:ce:fd:d1:50:bd:fb:76:78:eb:dd:4b:e2:dd:
d4:38:08:69:20:69:94:36:a5:42:d7:ea:91:a5:17:
6e:a9:39:da:98:f5:f6:ed:46:d9:92:e1:2e:36:0f:
dd:1a:04:5c:29:b4:34:94:8e:28:46:1c:ff:22:5e:
a2:63:a8:9c:3c:46:d2:13:58:51:35:f4:3a:18:05:
0f:b3:26:98:6a:5e:07:25:8c:3b:04:55:b6:50:e2:
58:b4:1c:7f:cd:07:9c:a1:ef:e6:c7:c3:a0:e4:dc:
98:b9:0d:91:0a:ae:79:8a:5d:42:4b:74:c4:1d:73:
e6:15:32:41:ee:1d:e4:7f:07:88:e3:91:1d:8d:c6:
c6:ba:81:dd:6d:5b:5e:8e:f0:03:84:28:eb:78:85:
01:c8:6b:63:9e:f6:6e:c7:93:e8:3b:24:44:54:7e:
0a:52:22:95:bb:46:c2:15:ec:85:87:9e:5b:c0:43:
cf:ee:d9:02:d7:9d:ba:81:f3:cb:d1:cc:12:1a:07:
03:3b:b8:7e:46:92:81:8f:b7:6e:b3:64:10:1f:6d:
70:b2:5e:3b:39:21:fa:bf:80:c2:90:d9:86:cc:cf:
4b:c2:0c:0c:b4:20:d3:ec:6c:1c:8e:40:7b:80:47:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:FB:86:35:0F:24:44:9C:36:DF:13:94:6B:9D:37:2D:B8:81:89
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5BA05EC4D811EDB555AA7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
103.48.168.0-103.48.170.255
103.228.64.0/24
150.107.0.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bc:81:87:f0:f0:ac:78:1e:10:b3:72:52:95:d0:28:c2:2d:
d9:08:cc:bc:bc:d0:ac:b0:aa:33:de:69:56:5f:26:30:af:6d:
e7:13:08:fd:c4:5e:c5:90:88:0b:02:95:8c:1b:26:40:a0:90:
86:12:46:8f:a1:8e:bb:e5:1a:cd:33:4f:f0:f2:7b:64:0d:6d:
20:96:71:58:99:65:ac:31:d7:2f:77:8b:dc:9f:96:ea:d6:8f:
24:63:c7:4d:5d:3c:c3:ce:5b:60:5b:a1:78:d5:f0:88:e3:69:
31:d8:d3:25:9b:f5:95:fc:42:35:8c:6c:de:d6:b2:c7:c5:41:
9c:03:42:ed:52:bf:4c:d5:8c:18:fd:b0:81:3a:25:9b:dc:4a:
73:56:5e:4a:10:07:58:cf:97:2e:3d:6c:ae:bc:c3:3b:4c:0f:
e0:94:6d:d6:17:bc:f7:e1:f3:06:a7:34:21:be:02:3c:87:6a:
6d:f3:8a:63:06:bb:1f:0a:d8:91:41:40:0f:bd:4d:ef:7a:6c:
37:d9:5b:7d:d2:0f:13:a5:63:56:ca:cb:ed:aa:99:dd:3b:ed:
e3:28:3c:60:7c:6f:f1:72:8c:3c:3c:66:03:4b:c4:91:f4:26:
a1:a8:71:87:1c:c6:58:65:e1:58:c4:58:d3:a0:bd:4b:e8:c6:
5b:aa:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org